[134430] in North American Network Operators' Group
Re: ARIN and the RPKI (was Re: AltDB?)
daemon@ATHENA.MIT.EDU (Dobbins, Roland)
Wed Jan 5 23:33:33 2011
From: "Dobbins, Roland" <rdobbins@arbor.net>
To: "nanog@nanog.org" <nanog@nanog.org>
Date: Thu, 6 Jan 2011 04:30:45 +0000
In-Reply-To: <m28vyysm3o.wl%randy@psg.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Jan 6, 2011, at 11:16 AM, Randy Bush wrote:
> actually, the formal rpki-based origin-validation stuff is measured to ta=
ke *less* cpu, a lot less, than ACLs
On the platforms which really matter in terms of rPKI, ACLs are handled in =
hardware, so this is pretty much a wash.=20
Concur on all the other points, however.
------------------------------------------------------------------------
Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com>
Most software today is very much like an Egyptian pyramid, with millions
of bricks piled on top of each other, with no structural integrity, but
just done by brute force and thousands of slaves.
-- Alan Kay
